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Listing of Claims : 
1-12. (Cancelled) 

13. (Currently Amended) A system for producing asymmetric cryptographic keys, said keys 
comprising m>\ private values Q x ,Q 2 ,—,Q m and m respective public values Gj,G 2 ,... ? G m , the 
system comprising: 

a processor; and 

a memory unit coupled to the processor, the memory unit storing a set of instructions 
which when executed cause the processor to execute the following acts: 

selecting a security parameter k , wherein & is an integer greater than 1 ; 

s e l e cting m bas e numb e rs g ] ,g 2 ,-,g m > wh e r e in e ach base numb e r g i (for i = l,...,m )4s 
an integer greater than 1 ; 

determining a modulus n , wherein n is a public integer equal to the product of at least 
two prime factors p X9 ...>p f , at least two of these prime factors, say p x and p 2 , being such that 

p x = 3 mod 4 and p 2 s 3 mod 4 ; 

selecting m base numbers g p g 2 g m , wherein each base number j? f . (for i = l,...,/w)Js_ 

an integer greater than 1 and is a non-quadratic residue of the ring of integers modulo ru and 
such that p 2 is complementary to p x with respect to one of the base numbers; 

calculating the public values G i for i = l,...,m through G, = g, 2 modn ; and 
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calculating the private values Q t for i = 1,..., m by solving either the equation 
G, • Q- = 1 mod n or the equation G, = 0/ mod/7 , wherein the public exponent v is such that 
v = 2*. 

14. (Previously presented) The system according to claim 13, wherein the number (/ - e) 
(where e > 0 ) of prime factors of the modulus n which are congruent to 3 mod 4 is larger than 
2, and those prime factors p J+l for 2<j<m which are congruent to 3 mod 4 are determined 

iteratively as follows: 

the profile profile^,) of gj with respect to the prime factors p x ,p 2 ,~< 9 Pj is computed, 

and 

if profile, (g y ) is flat, then the prime factor p j+x is chosen such that p J+x is 
complementary to p x with respect to g } ; else, a number g is chosen among the (j - 1) base 
numbers g l9 g 2 ,—,gj-\ ancl ail °f their multiplicative combinations, such that 
profile y (g) = profile ; (g 7 ), then p J+] is chosen such that profile 7+1 (g y ) * profile^ (g) , 

wherein the last prime factor p f _ e congruent to 3 mod 4 is, in the case that f-e<m, 
chosen such that p f _ e is complementary to p x with respect to all of the base numbers g i such 
that f -e<i<m and whose profile profile^,! {g l ) is flat 

15. (Previously Presented) The system according to claim 13, wherein the number e of 
prime factors of the modulus n which are congruent to 1 mod 4 is at least equal to 1 , and each 
such prime factor is determined as follows: 

a candidate prime number p is chosen, such that the Legendre symbol of each base 
number g i (for / = l,...,/w) with respect to p is equal to + 1 , 
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the integer t is computed which is such that (p - 1) is divisible by 2' , but not by 2' +1 , 
the integer s = (/? - 1 + 2' ) / 2' +1 is computed, 

an integer b = h p ~ U2 ' mod p , where h is a non-quadratic residue of the body of integers 
modulo p , is computed, 

2 v 

the m integers r t =g, mod;? for i = l 9 ... 9 m are computed, 
an integer u is initialized to u = 0 , 

the following sequence of steps, where / is initialized to 1, is iteratively implemented: 
an integer w is initialized to w = r t , 

if /; = ±g i , the value of i is incremented and a sequence of steps with the new 
value of / is proceeded to if / < m , whereas the candidate prime number p is 
accepted as a factor of the modulus n if / = m , 

an integer jj is initialized to 1 , 

the following sequence of steps, where an integer // is initialized to 1, is 
iteratively implemented : 

x = w 2 1 g 2 mod p is computed, 

y = x 2 mod p is computed, and 

if y - +1 , the sequence is terminated at the current value of // , 
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if y = -1 , jj is assigned the value jj = 2" , the number w is 

assigned a new value equal to the old value multiplied by b M 
modulo p , and 

for ii < t - 2 , the value of ii is incremented and a new 
iteration is proceeded to with the new value of ii , 

for ii = t-2, the value of number u is updated through the 
relation jj - 2'~ w , and 

if / - u < k , the candidate prime number p is rejected as a factor of the modulus 

if t - u > k , the value of i is incremented and a sequence of steps with the new 
value of / is proceeded to if / < m , whereas the candidate prime number p is 
accepted as a factor of the modulus n if / = m . 

16. (Previously presented) The system according to claim 15, wherein, to compute the / • m 
private components Q i} of the private values g 1? g 2 ,...,g m , the following steps are implemented 
for each couple (/, j) : 

an integer t is determined, which is equal to 1 if p } is congruent to 3 mod 4, and to the 
value obtained for t according to claim 15 if p j is congruent to 1 mod 4, 

an integer u is determined, which is equal to 0 if Pj is congruent to 3 mod 4, and to the 
value obtained for u according to claim 15 if p } is congruent to 1 mod 4, 

the integer z = G- mod p } is computed, where s = (/?-l + 2') / 2 r+1 , 
all the numbers zz are being considered, which: 
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if u = 0 , are such that zz = z or such that zz is equal to the product modulo p } of 

z by each of the 2"** 1 2" -th primitive roots of unity, for ii ranging from 1 to 
min(A;,0, 

if w > 0 , are such that zz is equal to the product modulo p } of za by each of the 

2 k 2 k -th roots of unity, where za is the value obtained for w according to claim 
15, and 

for each such number zz , a value for the component Q u is obtained by taking Q i } equal 
to zz if the equation G, = Q- mod« is used, or to the inverse of zz modulo p } if 
G, * Q- = 1 mod/? is used for this value of i . 

17. (Currently Amended) A computer-readable storage medium storing instructions for 
producing asymmetric cryptographic keys, said keys comprising m > 1 private values 
Q l5 0 2 ,...,£ m and m respective public values G,,G 2 ,...,G m , the medium storing instructions 
which when executed cause a processor to execute the following acts: 

selecting a security parameter k , wherein A: is an integer greater than 1 ; 

s electing m base numbers g } ,g 2 ,:->g m , whoroin each base number g i (for i-l,...,m)is 
an int e g e r gr e ater than 1 ; 

determining a modulus n , wherein n is a public integer equal to the product of at least 
two prime factors p } ,...,p f , at least two of these prime factors, say p x and p 2 , being such that 

p x s 3 mod 4 and p 2 = 3 mod 4 ; 
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selecting m base numbers g x , g 2 jg m , wherein each base. number g f . (for i = K. is 

an integer greater than 1 and is a non-quadratic residue of the ring of integers modulo n , and 
such that p 2 is complementary to p x with respect to one of the base numbers; 

calculating the public values G, for i = \,...,m through G, = g, mod/? ; and 

calculating the private values Q i for i = l,...,m by solving either the equation 
G, • 0/ = 1 modrt or the equation G t =Q^ mod/? , wherein the public exponent v is such that 
v = 2*. 

18. (Previously presented) The computer-readable storage medium storing instructions 
according to claim 17, wherein the number (/ - e) (where e > 0 ) of prime factors of the 
modulus n which are congruent to 3 mod 4 is larger than 2, and those prime factors p j+l for 
2 < j < m which are congruent to 3 mod 4 are determined iteratively as follows: 

the profile profile y (g 7 ) of g] with respect to the prime factors Pi,p 2 ,-,Pj is computed, 

and 

if profile ; (g 7 ) is flat, then the prime factor p J+l is chosen such that p J+l is 
complementary to p ] with respect to g } ; else, a number g is chosen among the (j - 1) base 
numbers g P g 2 >••.>£,-! and all of their multiplicative combinations, such that 
profile y (g) = profile > (g 7 ),then p J+] is chosen such that profile y+1 (g y ) * profile ;+1 (g) > 

wherein the last prime factor p f _ e congruent to 3 mod 4 is, in the case that f-e<m, 
chosen such that p f _ e is complementary to p x with respect to all of the base numbers g, such 
that / -e<i<m and whose profile profiley._ c „,(g ( .) is flat. 
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19. (Previously presented) The computer-readable storage medium storing instructions 
according to claim 17, wherein the number e of prime factors of the modulus n which are 
congruent to 1 mod 4 is at least equal to 1, and each such prime factor is determined as follows: 

a candidate prime number p is chosen, such that the Legendre symbol of each base 
number g, (for / = l,...,m) with respect to p is equal to +1, 

the integer t is computed which is such that (p - 1) is divisible by 2' , but not by 2' +1 , 

the integer s = (p - 1 + 2' ) / 2' +1 is computed, 

an integer b = h p ~ x/2 ' mod p , where h is a non-quadratic residue of the body of integers 
modulo p , is computed, 

the m integers r t = g t 2s mod/? for / = l,... 9 m are computed, 

an integer u is initialized to u = 0 , 

the following sequence of steps, where / is initialized to 1, is iteratively implemented: 
an integer w is initialized to w-r n 

if a; =±g n the value of / is incremented and a sequence of steps with the new 
value of / is proceeded to if i < m , whereas the candidate prime number p is 
accepted as a factor of the modulus n if / = m , 

if t) * ±g ( : 

an integer jj is initialized to 1, 
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the following sequence of steps, where an integer // is initialized to 1, is 
iteratively implemented : 

x = w 2 1 g 2 mod p is computed, 

y s x 2 1 mod p is computed, and 

if y = +1 9 the sequence is terminated at the current value of // , 

if y = -1 , jj is assigned the value jj = 2" , the number w is 

assigned a new value equal to the old value multiplied by b JJ 
modulo p , and 

for ii < t - 2 , the value of ii is incremented and a new 
iteration is proceeded to with the new value of ii , 

for ii = t - 2 , the value of number u is updated through the 
relation jj = 2'"" 5 and 

if f - u < k , the candidate prime number p is rejected as a factor of the modulus 

if r - u > k , the value of / is incremented and a sequence of steps with the new 
value of / is proceeded to if / < m , whereas the candidate prime number p is 
accepted as a factor of the modulus n if i = m . 

20. (Previously Presented) The computer-readable storage medium storing instructions 
according to claim 19, wherein, to compute the / • m private components Q u of the private 

values Q x ,Q 2 ,...,Q m , the following steps are implemented for each couple {ij) : 
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an integer t is determined, which is equal to 1 if p } is congruent to 3 mod 4, and to the 
value obtained for t according to claim 19 if p j is congruent to 1 mod 4, 

an integer u is determined, which is equal to 0 if Pj is congruent to 3 mod 4, and to the 
value obtained for u according to claim 19 if p } is congruent to 1 mod 4, 

the integer z = G- mod pj is computed, where s = (/?-l + 2') / 2' +1 , 

all the numbers zz are being considered, which: 

if u = 0 , are such that zz = z or such that zz is equal to the product modulo p j of 

z by each of the 2 /M 2"-th primitive roots of unity, for ii ranging from 1 to 
min(A:,0, 

if u > 0 , are such that zz is equal to the product modulo p j of za by each of the 

2* 2 k -th roots of unity, where za is the value obtained for w according to claim 
19, and 

for each such number zz , a value for the component Q t J is obtained by taking Q tJ equal 
to zz if the equation G t = Q- mod a? is used, or to the inverse of zz modulo p } if 
G, • Q* = 1 mod« is used for this value of / . 

2 1 . (Currently Amended) A computer-implemented process for producing asymmetric 
cryptographic keys, said keys comprising m>\ private values Q x ,Q 2 ,...,Q m and m respective 

public values G l ,G 2 ,... J G m , the computer-implemented process comprising: 

selecting a security parameter k , wherein A: is an integer greater than 1 ; 
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selecting m base numb e rs g P g 2 v,g m > wherein each base number g,. (for / = l,.,.,m) is 
an integer greater than 1 ; 

determining a modulus n , wherein n is a public integer equal to the product of at least 
two prime factors p x ,...,p f9 at least two of these prime factors, say p x and p 2 , being such that 

p x = 3 mod 4 and p 2 = 3 mod 4 ; 

selecting m base numbers g P g 2 jg^ , wherein each base number g i _jfor _i = 1,...,/M) js_ 

an integer greater than 1 and is a non-quadratic residue of the ring of integers modulo ru and 
such that p 2 is complementary to p x with respect to one of the base numbers; 

calculating the public values G, for / = l,...,m through G, - g, 2 modn ; and 

calculating the private values Q t for / = 1 ,...,/?? by solving either the equation 
G, • Q" = 1 modn or the equation = Q- mod/? , wherein the public exponent v is such that 

v = 2*: 

22. (Previously Presented) The computer-implemented process according to claim 21, 
wherein the number (/ - e) (where e > 0 ) of prime factors of the modulus n which are 
congruent to 3 mod 4 is larger than 2, and those prime factors p j+l for 2 < j < m which are 
congruent to 3 mod 4 are determined iteratively as follows: 

the profile profile,- (g y ) of g 7 with respect to the prime factors p x ,p 2 ,...,Pj is computed, 

and 

if profile ; (g y ) is flat, then the prime factor p J+l is chosen such that p j+] is 
complementary to p x with respect to g y ; else, a number g is chosen among the (j - 1) base 
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numbers g l5 g 2 >•••,£/-! and all of their multiplicative combinations, such that 
profile y (g) = profile y (g y ) ? then p J+] is chosen such that profile ;+1 (g y ) * profile y+1 (g) , 

wherein the last prime factor p f _ e congruent to 3 mod 4 is, in the case that f -e<m, 
chosen such that p f _ e is complementary to p x with respect to all of the base numbers g, such 
that / -e<i<m and whose profile profile^., (g ( . ) is flat. 

23. (Previously Presented) The computer-implemented process according to claim 21 s 
wherein the number e of prime factors of the modulus n which are congruent to 1 mod 4 is at 
least equal to 1, and each such prime factor is determined as follows: 

a candidate prime number p is chosen, such that the Legendre symbol of each base 
number g i (for i = \,...,m) with respect to p is equal to + 1 , 

the integer t is computed which is such that (p - 1) is divisible by 2' , but not by 2' +1 , 

the integer s = (p - 1 + 2' ) / 2' +1 is computed, 

an integer b = h p ~ U2 ' mod p , where h is a non-quadratic residue of the body of integers 
modulo p , is computed, 

the m integers r f = g* s mod p for / = l,...,m are computed, 
an integer u is initialized to u = 0 , 

the following sequence of steps, where / is initialized to 1, is iteratively implemented: 
an integer w is initialized to w = r t , 
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if r . = ±g i , the value of / is incremented and a sequence of steps with the new 
value of / is proceeded to if / < m , whereas the candidate prime number p is 
accepted as a factor of the modulus n if / = m , 

\fr i *±g i \ 

an integer jj is initialized to 1 , 

the following sequence of steps, where an integer ii is initialized to 1, is 
iteratively implemented : 

1 2 

x = w I g t mod p is computed, 

y = x 2 ' " ' mod p is computed, and 

if y = +1 ? the sequence is terminated at the current value of // , 

if y = —\ 9 jj is assigned the value jj = T , the number w is 

assigned a new value equal to the old value multiplied by b B 
modulo /?,.and 

for ii<t-2 y the value of ii is incremented and a new 
iteration is proceeded to with the new value of // , 

for // = t - 2 , the value of number u is updated through the 
relation jj = 2 l ' u , and 

if t - u < k , the candidate prime number p is rejected as a factor of the modulus 
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if t - u > k , the value of / is incremented and a sequence of steps with the new 
value of / is proceeded to if i < m , whereas the candidate prime number p is 
accepted as a factor of the modulus n if i = m . 

24. (Previously Presented) The computer-implemented process according to claim 23, 
wherein, to compute the / • m private components Q tJ of the private values Q X ,Q 2 ,...,Q m » the 

following steps are implemented for each couple (i 9 j) : 

an integer t is determined, which is equal to 1 if Pj is congruent to 3 mod 4, and to the 
value obtained for t according to claim 23 if p j is congruent to 1 mod 4, 

an integer u is determined, which is equal to 0 if p j is congruent to 3 mod 4, and to the 
value obtained for u according to claim 23 if pj is congruent to 1 mod 4, 

the integer z = G/ mod p j is computed, where s = (p - 1 + 2' ) / 2' +1 , 

all the numbers zz are being considered, which: 

if u = 0 , are such that zz = z or such that zz is equal to the product modulo p } of 
z by each of the 2' M 2 /7 -th primitive roots of unity, for // ranging from 1 to 
min(A:,0 5 

if u > 0 , are such that zz is equal to the product modulo p } of za by each of the 

2 k 2 k -th roots of unity, where za is the value obtained for w according to claim 
23, and 
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for each such number zz 9 a value for the component Q t j is obtained by taking Q i } equal 
to zz if the equation G i = Q- mod/7 is used, or to the inverse of zz modulo p } if 
G, • Q~ = 1 modtf is used for this value of / . 



